Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

5510 redundancy question

setting up redundant 5510's with an outside interface an inside interface and a dmz interface.  The question is, will the standby unit go to active if ANY of the 3 interfaces goes down?  i.e. if the primary interface f0/2 nameif dmz goes down, will the standby unit go active?  or does it take the inside or outside interface for to go down before it switches over?

3 REPLIES
Cisco Employee

Re: 5510 redundancy question

Hello,

By default, a single interface failure causes failover.  You can specify a  specific number of interfaces or a percentage of monitored interfaces  that must fail before a failover occurs.

To change the default failover criteria, enter the following command in global configuration mode:

hostname(config)# failover interface-policy num[%]

This is mentioned in the ASA configuration guide here:

http://www.cisco.com/en/US/partner/docs/security/asa/asa80/configuration/guide/failover.html#wp1075905

Hope that helps!

Community Member

Re: 5510 redundancy question

So by default, any single interface failing will cause fail over? (which is what I want)

Cisco Employee

Re: 5510 redundancy question

Hello,

Yes, that is correct.  By default, if a failure occurs on any single interface that is being monitored, a failover will occur.

Are you using physical interfaces on the ASA or logical subinterfaces?  If you are using physical interfaces, then by default all physical interfaces are monitored for failover.  This is mentioned here:

By default, monitoring physical interfaces is enabled and monitoring subinterfaces is disabled.

http://www.cisco.com/en/US/partner/docs/security/asa/asa80/configuration/guide/failover.html#wp1073911

If you are using logical subinterfaces, then you will specially need to enable monitoring with the command:

monitor-interface

Thanks!

163
Views
0
Helpful
3
Replies
CreatePlease to create content